Well the answer, as far as I know, is yes and no. Yes the tunnel can pass the traffic, provided the stack passes the routing updates to the device, which is the problem.
CheckPoint is dependent on the resident OS to provide a mechanism to pass the routing traffic to the tunnel. With a Nokia box what you can do is create a GRE tunnell and then turn on your routing protocol of choice on the interface(of course the requisite FW rules must be turned on). It works with modest reliability.
With a Solaris or NT box you would need to find some sort of third party tool that would create a virtual interface for the tunnel.
-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Thursday, December 07, 2000 3:48 PM
To: [email protected]
Subject: [FW1] Routing updates and IPSEC
Hi,
Can I send routing updates over an IPSEC tunnel between two checkpoint
Vpn-1? Example: Primary Connection is Vpn and backup connection is the
auto-DialOnDemand.
Regards.
Ihsan Cakmakli
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
***********************************************************************
Gruntal & Co., L.L.C.'s e-mail system is for business purposes only.
Messages are not confidential. All e-mail may be reviewed by
authorized supervisors, compliance or internal audit personnel.
E-mail will be archived for at least three years and may be produced
to regulatory agencies or others with a legal right to access such
information. Gruntal will not accept trade order instructions via
e-mail. Please telephone your Account Executive to place trade orders.
Gruntal & Co., L.L.C.
***********************************************************************